This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
File: PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft (raw, json)
Hash identifier: V6HQNCE/wbXJ7/l5b8VX/4Ck/JwqMbY9UIXWg8QuMMo=
Subject key identifier: 6F:99:50:B5:3D:D4:5E:01:05:F8:F6:BF:98:52:58:AB:29:C0:43:37
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 019BFB094BDD5366BD28E308861EE8EFD797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
Manifest number: 11F8
Signing time: Mon 26 Jan 2026 16:00:48 +0000
Manifest this update: Mon 26 Jan 2026 16:00:48 +0000
Manifest next update: Tue 27 Jan 2026 16:00:48 +0000
Files and hashes: 1: 7XPR057HTONIllGtY9NijiuY-tk.roa (hash: rKfjiDRkcr3HFT8PmmA3P0sCBQ3drFmQ5QDnLKCb/BE=)
2: PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl (hash: LaGbDV/vUBf6EFYOSpJxJctmcUqWBxM4vC93V2wz1oM=)
3: T4FApCxhFe83q9A7YZlC1nZYzIE.roa (hash: LjUt5usAgPWHNriSJWMg7OS8Oagi6w46/dUqLi/UEzA=)
4: Wn-ZLE8xGx2iUZq_8EgFIe3BY1M.roa (hash: SwGxPAdfidv7O5nNS+nKj4I72Qs5sJPeTh9qbwfsZWo=)
5: YuGYvjrFzLezHsgzIUZ0asWCqVk.roa (hash: aZLneGXD5YvsOe9tvMiGcrBxDYxxGmpY4vDCZwd72Z8=)
6: fLae4aR9HsO6ApeohQnbJHEsvgg.roa (hash: /b3Xi59hV2RbWadggK4I0wXvCWO8lTHkzV3V9hJ6K0Y=)
7: jccKxXf-KlBy0OODUdeGAP1Pln4.roa (hash: kXcgJH+D8EkeDblDPw+VtydCo7evj5I/OxvPnwmyUe8=)
8: r2cUyHBMaewNpNV3po9MOZwNcyU.roa (hash: SVkhtUySEPUVdVwXoSgDIclbqsQ0muf2pONZTDoO/YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:09:4b:dd:53:66:bd:28:e3:08:86:1e:e8:ef:d7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Jan 26 16:00:48 2026 GMT
Not After : Jan 27 16:00:48 2026 GMT
Subject: CN=6f9950b53dd45e0105f8f6bf985258ab29c04337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:49:61:fb:24:c0:b3:67:d8:92:ad:cf:d8:
74:ba:0e:37:5b:5e:d5:e9:85:64:d5:1b:e3:35:5b:
89:56:fd:6a:5d:0e:cb:d4:26:11:b6:69:06:2c:56:
82:50:d8:be:e8:74:11:02:39:4e:36:33:13:c9:dd:
04:0d:3a:8c:88:44:4b:ee:b0:ea:51:77:58:0b:49:
42:e0:83:1f:44:ef:a1:23:79:9c:7a:ee:f8:63:24:
9b:27:2b:c5:43:98:69:bf:a9:b0:ee:42:70:51:4c:
25:e6:be:39:fa:82:96:6a:d6:ff:e7:bf:12:70:54:
0a:a1:f8:53:2a:2c:7f:bb:fb:f2:87:54:a4:8d:c7:
e8:e6:01:6d:71:9b:c4:ee:ef:2b:bf:6d:40:e8:6d:
4a:09:22:d7:e9:d8:73:8a:40:a8:58:61:eb:3e:58:
3a:da:94:e9:98:65:dc:11:1d:e0:bb:00:43:b1:9e:
8c:02:95:7d:98:ae:7a:c6:12:84:35:40:d5:5d:74:
6e:1d:a9:55:ea:67:a3:b0:47:58:e7:5a:9c:63:61:
36:08:a8:bb:16:25:5e:37:ec:aa:d0:b3:1b:5b:5f:
60:85:a5:fc:90:6e:1a:d2:75:3d:86:2b:22:1a:61:
58:9e:50:93:5d:05:17:7c:c2:20:74:b3:33:aa:5a:
d4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:50:B5:3D:D4:5E:01:05:F8:F6:BF:98:52:58:AB:29:C0:43:37
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:94:b4:27:f1:45:ae:39:fe:8a:7d:29:99:59:61:2c:24:5a:
d5:c9:34:f8:5c:df:49:94:3d:55:30:f0:20:97:a7:dd:88:00:
0c:dd:90:d0:47:cd:ab:61:6f:6e:c5:18:01:2b:fc:73:72:49:
10:d2:5d:81:ca:1c:33:89:b4:a5:8c:c2:03:07:8e:0b:d8:8b:
ec:25:a0:79:91:93:28:05:a2:2c:38:05:01:04:75:db:fb:99:
a7:b7:3c:83:a2:66:e0:3b:04:71:eb:f9:88:15:59:f9:ad:71:
bd:6c:90:28:c4:48:a8:8d:f3:d1:00:3d:ab:e9:6b:da:64:a8:
45:7d:64:a0:c5:62:1e:bb:5e:c2:dd:be:b5:4c:91:40:d6:9f:
ed:1c:02:b8:54:16:e2:d6:75:d1:76:e7:da:88:0d:ab:d3:e9:
57:57:9b:d4:46:6e:f4:a0:9a:88:0f:3c:9c:00:3d:b7:84:31:
74:90:f7:a7:c7:bb:99:4f:26:88:08:b3:72:ec:55:10:e8:55:
0e:4c:62:2a:e0:a0:db:15:9f:bc:ab:9c:ca:f6:05:3c:9a:75:
33:da:2c:49:5b:a5:6f:a0:f3:7c:45:af:e7:e2:11:5c:97:9d:
17:15:f1:18:b3:b4:a2:b9:1e:c0:70:6a:93:c2:02:4c:a5:38:
03:43:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:19:19 2026 by rpki-client